Malware.AI.61797187 removal guide

The Malware.AI.61797187 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Malware.AI.61797187 virus can do?

Reads data out of its own binary image
Authenticode signature is invalid

How to determine Malware.AI.61797187?


File Info:
name: 44724A0E29F57D0325C1.mlw
path: /opt/CAPEv2/storage/binaries/55e481b1fff6fa7e89234d0e4a042a6a7b94b2c1595ffd6662a6935d8e33c55e
crc32: 218A81C0
md5: 44724a0e29f57d0325c183f9642a4527
sha1: 9c670e128510f764dd8942b456bbd75da2af4ba9
sha256: 55e481b1fff6fa7e89234d0e4a042a6a7b94b2c1595ffd6662a6935d8e33c55e
sha512: 97e373cfd6ae9b5fb9828fdd5092c3ceaf1108eb96bf870e0db9719d1e2ec7e5b6b999c1ba1549f0796503cdc4cd0a1f506ca7ee9c46260a12e394f07a11793d
ssdeep: 3072:jAs0vVXkiKMMNiCu2PtthdxmMii7d3g42/DQHgJwO0uUWMMDnT9PsSeyIopzqtHW:0XvVMNT9zxmkdQ427tOO0CLT9PXzpAG
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15FD59E21F2E140BED1A7113418B7AB399ABD7D215621DB87F374FF5A1D31281D92930E
sha3_384: f790a8e026b4c407b0c4e20f136eecbbab4b5127460c6a8d5c0f8068423e1bbcac6adf7115de6fbdec5ae5c4825d98b5
ep_bytes: 558bec6aff68f8a86a006888a2690064
timestamp: 2006-02-01 23:02:14

Version Info:
Comments: 
CompanyName: Sysinternals - www.sysinternals.com
FileDescription: Rootkit detection utility
FileVersion: 1.70
InternalName: 
LegalCopyright: Copyright (C) 2005-2006 Bryce Cogswell and Mark Russinovich
LegalTrademarks: 
OriginalFilename: 
PrivateBuild: 
ProductName: Sysinternals Rootkitrevealer
ProductVersion: 1.70
SpecialBuild: 
Translation: 0x0409 0x04b0

Malware.AI.61797187 also known as:

Bkav	W32.AIDetectMalware
DrWeb	Trojan.Siggen4.46935
Cynet	Malicious (score: 100)
FireEye	Generic.mg.44724a0e29f57d03
McAfee	GenericRXCE-WZ!44724A0E29F5
Malwarebytes	Malware.AI.61797187
Zillya	Trojan.Swisyn.Win32.28376
K7AntiVirus	Riskware ( 0040eff71 )
K7GW	Riskware ( 0040eff71 )
Cyren	W32/Swisyn.R.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
APEX	Malicious
ClamAV	Win.Malware.Swisyn-7008262-0
NANO-Antivirus	Trojan.Win32.Swisyn.fbdouy
Avast	Win32:Malware-gen
McAfee-GW-Edition	BehavesLike.Win32.Dropper.vz
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Suspicious PE
GData	Win32.Trojan.PSE2.1VF29Y
Antiy-AVL	GrayWare/Win32.Generic
Kingsoft	malware.kb.a.956
Microsoft	Program:Win32/Wacapew.C!ml
Google	Detected
Cylance	unsafe
Rising	Trojan.Generic@AI.100 (RDMK:gL68XU6woHnLTvEEPEhKPA)
Yandex	Trojan.Agent!vKq7jnVz+XE
Ikarus	Trojan.Win32.Swisyn
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Swisyn.R!tr
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_60% (D)

How to remove Malware.AI.61797187?

Malware.AI.61797187 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X